The malware has filled the gap created by last year's law enforcement takedowns of Lumma and Rhadamanthys. This indicates criminal actors are developing successor malware to replace disrupted credential-stealing and data exfiltration tools.